$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: 3qdzvrKyvlklpnsYmIo5y+BpUrAKqf9piU3Ig20wnBw= Subject key identifier: D7:E4:D4:3B:4A:CA:2C:1B:A5:92:E7:93:4F:93:F5:E8:0D:91:5B:71 Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 226EF880A3770261E0056658FAD6A6E51CACBA5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 03A7 Signing time: Sat 18 Oct 2025 13:42:03 +0000 Manifest this update: Sat 18 Oct 2025 13:37:03 +0000 Manifest next update: Tue 21 Oct 2025 20:11:03 +0000 Files and hashes: 1: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: LxlhGvniVX1DZYQ1W62yOkB/KkKuWv10+O7NsPderxM=) 2: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: Kf2l+jUx7UqXG99puMD7O0YhQ/Ku6aIz18tpBMR9wQM=) 3: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6e:f8:80:a3:77:02:61:e0:05:66:58:fa:d6:a6:e5:1c:ac:ba:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Oct 18 13:37:03 2025 GMT Not After : Oct 21 20:11:03 2025 GMT Subject: CN=D7E4D43B4ACA2C1BA592E7934F93F5E80D915B71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a5:97:c5:c9:5f:3d:f9:2b:95:7d:54:4b:db: 2a:50:bd:e3:cb:d9:9b:9e:08:7d:24:9c:dd:4a:58: 92:95:8c:f7:09:09:35:f1:26:2f:f6:d5:3e:3b:a2: d8:76:cd:65:e7:72:2e:06:0b:bd:45:eb:1a:d2:fa: ac:f4:83:60:2a:f3:fa:f9:15:34:f8:90:00:55:2b: 42:0f:73:f3:4a:cd:63:1d:f1:b9:11:d8:09:c0:c4: c2:a8:27:e9:ab:cb:de:35:0c:25:c3:82:2e:c1:1d: e2:b1:61:5f:79:04:52:36:e5:e0:1f:75:37:86:e8: a8:04:af:14:39:b0:3b:bc:ed:0a:db:3d:54:73:ee: 69:43:01:d0:7d:99:16:d0:1e:a1:d7:4e:23:c8:2d: 63:75:45:6a:26:91:a1:67:9b:0b:4f:c4:25:4d:13: 14:ce:6a:56:9b:5f:9b:bf:6a:84:dd:86:21:92:c2: 15:e3:72:56:91:cc:21:25:1d:ef:9b:fa:1e:83:4b: ec:48:2b:26:e3:5f:b2:e3:b6:3f:dd:f2:18:cf:eb: 33:96:3e:99:88:01:a0:90:94:6e:89:60:80:f5:57: cd:cf:f0:bc:7b:19:18:8b:39:cb:ca:68:fd:6c:3d: 06:a4:e5:66:cd:f4:79:b6:b2:4d:27:d2:19:40:fd: e8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E4:D4:3B:4A:CA:2C:1B:A5:92:E7:93:4F:93:F5:E8:0D:91:5B:71 X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7c:36:49:90:a0:cd:1a:68:89:ca:7d:56:a7:68:c0:f5:1b: 0f:04:6a:51:64:9d:ee:68:1f:5f:16:45:dd:74:99:16:f8:9d: 2e:d2:c5:28:ba:05:ac:ce:69:f5:b9:9a:89:f2:96:60:76:81: 19:05:d9:1c:b7:42:65:c9:0d:ba:66:24:c7:93:65:6f:3b:7a: 0b:c1:90:57:20:5a:bc:7e:db:77:97:02:46:ad:72:5e:28:9f: be:98:e7:bd:b2:4a:c2:b0:85:0d:20:2e:05:2a:88:e9:e2:2c: f3:3b:a2:23:2c:33:bf:cb:52:75:f9:80:d5:69:d9:18:7e:75: 96:d1:87:c3:26:7a:3a:ac:cc:bd:a2:e0:cc:83:21:b6:28:68: 3c:32:86:1a:7d:21:03:bb:fd:96:84:cd:8c:05:54:df:ee:b0: a5:0c:87:31:44:7a:26:79:18:70:f2:c4:a5:6f:92:b7:84:37: d8:3a:86:0a:3e:36:31:5b:5b:42:b3:2a:7d:e6:74:77:68:6c: a2:7a:20:da:e5:c4:85:f9:23:8b:d2:f8:6e:02:6c:0e:19:9c: b5:55:b6:89:71:a7:2a:b0:c0:00:22:48:6c:6d:d4:32:e6:47: 3d:60:e7:4a:60:5b:45:d2:01:06:35:8b:1e:72:be:1b:04:5b: b0:7b:12:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIm74gKN3AmHgBWZY+tam5Rysul0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNTEwMTgxMzM3MDNaFw0yNTEwMjEyMDExMDNaMDMxMTAvBgNV BAMTKEQ3RTRENDNCNEFDQTJDMUJBNTkyRTc5MzRGOTNGNUU4MEQ5MTVCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTpZfFyV89+SuVfVRL2ypQvePL 2ZueCH0knN1KWJKVjPcJCTXxJi/21T47oth2zWXnci4GC71F6xrS+qz0g2Aq8/r5 FTT4kABVK0IPc/NKzWMd8bkR2AnAxMKoJ+mry941DCXDgi7BHeKxYV95BFI25eAf dTeG6KgErxQ5sDu87QrbPVRz7mlDAdB9mRbQHqHXTiPILWN1RWomkaFnmwtPxCVN ExTOalabX5u/aoTdhiGSwhXjclaRzCElHe+b+h6DS+xIKybjX7Ljtj/d8hjP6zOW PpmIAaCQlG6JYID1V83P8Lx7GRiLOcvKaP1sPQak5WbN9Hm2sk0n0hlA/ejXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1+TUO0rKLBulkueTT5P16A2RW3EwHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR8NkmQoM0aaInKfVanaMD1Gw8EalFkne5o H18WRd10mRb4nS7SxSi6BazOafW5monylmB2gRkF2Ry3QmXJDbpmJMeTZW87egvB kFcgWrx+23eXAkatcl4on76Y572ySsKwhQ0gLgUqiOniLPM7oiMsM7/LUnX5gNVp 2Rh+dZbRh8MmejqszL2i4MyDIbYoaDwyhhp9IQO7/ZaEzYwFVN/usKUMhzFEeiZ5 GHDyxKVvkreEN9g6hgo+NjFbW0KzKn3mdHdobKJ6INrlxIX5I4vS+G4CbA4ZnLVV tolxpyqwwAAiSGxt1DLmRz1g50pgW0XSAQY1ix5yvhsEW7B7Ekg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:48 2025 by rpki-client